CVE-2006-2019: Apple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause a denial of service (CPU consumption and crash) via a TD…

PriorityP420medium5CVSS 2.0

AVNACLAuNCNINAP

EXPLOIT

EPSS

4.07%

89.4th percentile

Apple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause a denial of service (CPU consumption and crash) via a TD element with a large number in the rowspan attribute.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
apple	mac_os_x	—	—
apple	safari	—	—
apple	safari	—	—
apple	safari	—	—
apple	webkit	—	—
jsboard	jsboard	<= 2.0.11	—
omnigroup	omniweb	—	—

CVSS provenance

nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

vendor_redhat7.5HIGH

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

Suricata

ET EXPLOIT Barracuda Spam Firewall 3.3.x RCE 2006-4000 (Inbound)

suricata·2019-12-16

CVE-2006-4000 ET EXPLOIT Barracuda Spam Firewall 3.3.x RCE 2006-4000 (Inbound) ET EXPLOIT Barracuda Spam Firewall 3.3.x RCE 2006-4000 (Inbound) Rule: alert http $EXTERNAL_NET any -> any any (msg:"ET EXPLOIT Barracuda Spam Firewall 3.3.x RCE 2006-4000 (Inbound)"; flow:established,to_server; http.method; content:"GET"; http.uri; content:"/cgi-bin/preview_email.cgi?file=/mail/mlog/|7c|"; startswith; fast_pattern; content:"http"; distance:0; reference:url,unit42.paloaltonetworks.com/mirai-variant-echobot-resurfaces-with-13-previously-unexploited-vulnerabilities/; reference:cve,2006-4000; classtype:attempted-admin; sid:2029173; rev:3; metadata:affected_product Linux, attack_target IoT, created_at 2019_12_16, cve CVE_2006_4000, deployment Perimeter, confidence Medium, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_04_13;)

Suricata

ET EXPLOIT Barracuda Spam Firewall 3.3.x RCE 2006-4000 (Outbound)

suricata·2019-12-16

CVE-2006-4000 ET EXPLOIT Barracuda Spam Firewall 3.3.x RCE 2006-4000 (Outbound) ET EXPLOIT Barracuda Spam Firewall 3.3.x RCE 2006-4000 (Outbound) Rule: alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET EXPLOIT Barracuda Spam Firewall 3.3.x RCE 2006-4000 (Outbound)"; flow:established,to_server; http.method; content:"GET"; http.uri; content:"/cgi-bin/preview_email.cgi?file=/mail/mlog/|7c|"; startswith; fast_pattern; content:"http"; distance:0; reference:url,unit42.paloaltonetworks.com/mirai-variant-echobot-resurfaces-with-13-previously-unexploited-vulnerabilities/; reference:cve,2006-4000; classtype:attempted-admin; sid:2029172; rev:3; metadata:affected_product Linux, attack_target IoT, created_at 2019_12_16, cve CVE_2006_4000, deployment Perimeter, confidence Medium, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_04_13;)

Suricata

GPL VOIP EXPLOIT SIP UDP Softphone overflow attempt

suricata·2010-09-23

CVE-2006-0189 GPL VOIP EXPLOIT SIP UDP Softphone overflow attempt GPL VOIP EXPLOIT SIP UDP Softphone overflow attempt Rule: alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg:"GPL VOIP EXPLOIT SIP UDP Softphone overflow attempt"; content:"|3B|branch|3D|"; content:"a|3D|"; pcre:"/^a\x3D[^\n]{1000,}/smi"; reference:bugtraq,16213; reference:cve,2006-0189; classtype:misc-attack; sid:2100223; rev:2; metadata:created_at 2010_09_23, cve CVE_2006_0189, confidence Medium, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2019_07_26;)

Suricata

GPL SNMP SNMP trap Format String detected

suricata·2010-09-23

CVE-2006-0250 GPL SNMP SNMP trap Format String detected GPL SNMP SNMP trap Format String detected Rule: alert udp $EXTERNAL_NET any -> $HOME_NET 162 (msg:"GPL SNMP SNMP trap Format String detected"; content:"%s"; fast_pattern; reference:bugtraq,16267; reference:cve,2006-0250; reference:url,www.osvdb.org/displayvuln.php?osvdb_id=22493; classtype:attempted-recon; sid:2100227; rev:5; metadata:created_at 2010_09_23, cve CVE_2006_0250, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2019_10_08;)